- Release-announce - lists.openstack.org

cliff 4.6.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We are jazzed to announce the release of: cliff 4.6.0: Command Line Interface Formulation Framework This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cliff For more details, please see below. Changes in cliff 4.5.0..4.6.0 ----------------------------- b6119d5 Test python 3.10 and 3.11 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- setup.cfg | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

oslo.context 5.4.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We are chuffed to announce the release of: oslo.context 5.4.0: Oslo Context library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. Changes in oslo.context 5.3.0..5.4.0 ------------------------------------ 1d00ac1 reno: Update master for unmaintained/yoga 194dc10 tox: Drop envdir 2cb9e99 Bump hacking 40683ee Update python classifier in setup.cfg eaca428 pre-commit: Integrate bandit, mypy 2c1aab0 pre-commit: Bump dependencies Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 19 +++++++++++++++++-- releasenotes/source/yoga.rst | 2 +- requirements.txt | 4 ---- setup.cfg | 1 + test-requirements.txt | 6 +----- tox.ini | 32 +++++++++++--------------------- 6 files changed, 31 insertions(+), 33 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9312533..888f211 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - diff --git a/test-requirements.txt b/test-requirements.txt index 1d38365..35939c6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,5 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -hacking>=3.0.1,<3.1.0 # Apache-2.0 +hacking>=6.1.0,<6.2.0 # Apache-2.0

1 0

oslo.serialization 5.4.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We enthusiastically announce the release of: oslo.serialization 5.4.0: Oslo Serialization library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.serialization Download the package from: https://pypi.org/project/oslo.serialization Please report issues through: https://bugs.launchpad.net/oslo.serialization/+bugs For more details, please see below. Changes in oslo.serialization 5.3.0..5.4.0 ------------------------------------------ 4ceb593 Display coverage report dabffaa reno: Update master for unmaintained/yoga 471f10d Update python classifier in setup.cfg 7f90f0c pre-commit: Integrate bandit 5587e95 pre-commit: Bump versions 9aaea36 Require pytz only in Python < 3.9 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 28 ++++++++++------------------ oslo_serialization/jsonutils.py | 2 +- releasenotes/source/yoga.rst | 2 +- requirements.txt | 8 ++------ setup.cfg | 1 + test-requirements.txt | 10 ---------- tox.ini | 8 +++++--- 7 files changed, 20 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b8be88c..8d2ae19 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -13,2 +9,2 @@ oslo.utils>=3.33.0 # Apache-2.0 -pytz>=2013.6 # MIT -tzdata>=2022.4 # MIT +pytz>=2013.6;python_version<"3.9" # MIT +tzdata>=2022.4;python_version>="3.9" # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 941f435..7ccc454 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. -hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -7 +2,0 @@ stestr>=2.0.0 # Apache-2.0 - @@ -11,5 +5,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 - -# Bandit security code scanner -bandit>=1.7.0,<1.8.0 # Apache-2.0 - -pre-commit>=2.6.0 # MIT

1 0

oslo.limit 2.4.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We eagerly announce the release of: oslo.limit 2.4.0: Limit enforcement library to assist with quota calculation. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 2.3.0..2.4.0 ---------------------------------- a9d2792 reno: Update master for unmaintained/yoga d85a3ad Bump hacking e8d996e Update python classifier in setup.cfg Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- releasenotes/source/yoga.rst | 2 +- requirements.txt | 3 --- setup.cfg | 1 + test-requirements.txt | 6 +----- 5 files changed, 4 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f523f83..ad2b58e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,3 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. diff --git a/test-requirements.txt b/test-requirements.txt index 7d6094f..80915d5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -6 +2 @@ fixtures>=3.0.0 # Apache-2.0/BSD -hacking>=3.0.1,<3.1.0 # Apache-2.0 +hacking>=6.1.0,<6.2.0 # Apache-2.0

1 0

oslo.utils 7.1.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We are pumped to announce the release of: oslo.utils 7.1.0: Oslo Utility library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 7.1.0 ^^^^^ New Features * Introducing a new spec DSL operator called "<range-in>" that allows users to match a numeric value against a range of numbers that are delimited with lower and upper limits. The new operator is a binary operator that accepts 4 arguments. * The first one and the last one are brackets. "[" and "]" defines inclusive limits while "(" and ")" defines exclusive limits. * The second one is the lower limit while the third one is the upper limit. Example: "<range-in> [ 10.4 20 )" will match a value against an range such as the lower limit of the range is 10.4 and the upper limit is 20. Note that 10.4 is included while 20 is excluded. Changes in oslo.utils 7.0.0..7.1.0 ---------------------------------- 72c80f6 add <range-in> spec DSL operator 093f20d reno: Update master for unmaintained/yoga 619d312 pre-commit: Integrate bandit 2eb7a9f pre-commit: Bump versions e159cfd Bump hacking 569296d Require pytz only in Python < 3.9 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 29 ++-- oslo_utils/excutils.py | 2 +- oslo_utils/specs_matcher.py | 52 +++++- .../new_spec_dsl_operator-21c80a46f67c56df.yaml | 17 ++ releasenotes/source/yoga.rst | 2 +- requirements.txt | 4 +- test-requirements.txt | 11 -- tox.ini | 7 +- 9 files changed, 272 insertions(+), 44 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 57158f7..be2c366 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ oslo.i18n>=3.15.3 # Apache-2.0 -pytz>=2013.6 # MIT +pytz>=2013.6;python_version<"3.9" # MIT @@ -14 +14 @@ packaging>=20.4 # BSD -tzdata>=2022.4 # MIT +tzdata>=2022.4;python_version>="3.9" # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 6a28448..2a80df1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,6 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -hacking>=3.0.1,<3.1.0 # Apache-2.0 - @@ -22,5 +15,0 @@ oslo.config>=5.2.0 # Apache-2.0 - -# Bandit security code scanner -bandit>=1.7.0,<1.8.0 # Apache-2.0 - -pre-commit>=2.6.0 # MIT

1 0

oslo.service 3.4.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We contentedly announce the release of: oslo.service 3.4.0: oslo.service library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. Changes in oslo.service 3.3.0..3.4.0 ------------------------------------ bc00121 Switch to coverage command 3bab803 reno: Update master for unmaintained/yoga cf27f03 pre-commit: Integrate doc8 and bandit 6726f91 pre-commit: Bump versions ac181ce Bump hacking 875b593 Update python classifier in setup.cfg Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- .pre-commit-config.yaml | 34 +++++++++++++++------------------- releasenotes/source/yoga.rst | 2 +- requirements.txt | 5 ----- setup.cfg | 1 + test-requirements.txt | 12 ------------ tox.ini | 31 +++++++++++++++++++------------ 7 files changed, 37 insertions(+), 50 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ffe8f4e..f2ecd96 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -8 +3,0 @@ eventlet>=0.25.2 # MIT -fixtures>=3.0.0 # Apache-2.0/BSD diff --git a/test-requirements.txt b/test-requirements.txt index 0d470c3..17861a0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -6 +1,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -11,2 +5,0 @@ stestr>=2.0.0 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0 - @@ -14,5 +6,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 - -# Bandit security code scanner -bandit>=1.7.0,<1.8.0 # Apache-2.0 - -pre-commit>=2.6.0 # MIT

1 0

oslo.middleware 6.1.0 (caracal)
by no-reply＠openstack.org 22 Feb '24

22 Feb '24

We are amped to announce the release of: oslo.middleware 6.1.0: Oslo Middleware library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. 6.1.0 ^^^^^ New Features * The new "[healthcheck] ignore_proxied_requests" option has been added. When this option is set to true, the healthcheck middleware ignores requests with any of the following headers, which indicates that the requests came through a reverse proxy or a load balancer. * "x-forwarded" * "x-forwarded-proto" * "x-forwarded-host" * "x-forwarded-for" * "x-forwarded-prefix" Changes in oslo.middleware 6.0.0..6.1.0 --------------------------------------- 35a46b3 reno: Update master for unmaintained/yoga b880f0b Bump hacking 58b4350 Update python classifier in setup.cfg 25f91a7 healthcheck: Ignore proxied requests Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- oslo_middleware/healthcheck/__init__.py | 9 ++++++ oslo_middleware/healthcheck/opts.py | 3 ++ ...k-ignore_proxied_requests-d04d1661bd687bc6.yaml | 13 +++++++++ releasenotes/source/yoga.rst | 2 +- requirements.txt | 4 --- setup.cfg | 1 + test-requirements.txt | 6 +--- 9 files changed, 61 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index baa1d01..1b3f2cc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - diff --git a/test-requirements.txt b/test-requirements.txt index ffee9a5..a9750e4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -6 +2 @@ fixtures>=3.0.0 # Apache-2.0/BSD -hacking>=3.0.1,<3.1.0 # Apache-2.0 +hacking>=6.1.0,<6.2.0 # Apache-2.0

1 0

barbican-tempest-plugin 3.1.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We are jazzed to announce the release of: barbican-tempest-plugin 3.1.0: OpenStack barbican tempest tests. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/barbican-tempest-plugin Download the package from: https://tarballs.openstack.org/barbican-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican-tempest-plugin 3.0.0..3.1.0 ----------------------------------------------- 6345b34 Pause testing of multiple secret stores 5558bcb Tests with signed volumes 962ab9b Barbican tempest missing IDs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 ++- 10 files changed, 363 insertions(+), 9 deletions(-)

1 0

cinder-tempest-plugin 1.11.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We jubilantly announce the release of: cinder-tempest-plugin 1.11.0: Tempest plugin tests for Cinder. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cinder-tempest-plugin Download the package from: https://tarballs.openstack.org/cinder-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. Changes in cinder-tempest-plugin 1.10.0..1.11.0 ----------------------------------------------- c00cb0a Enable scope testing for SRBAC 4ee0bba No cinderlib testing in 2024.1 and later jobs 0de194c Increase swap size for lvm-barbican jobs ed387a0 Update stable jobs on master gate dad66cf zuul: use only RE2 syntax dfe2c22 Replace deprecated terms Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 62 ++++++++++++++++++++++++++++++++++++-------------------------- 1 file changed, 36 insertions(+), 26 deletions(-)

1 0

designate-tempest-plugin 0.21.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We eagerly announce the release of: designate-tempest-plugin 0.21.0: OpenStack DNS As A Service (Designate) Functional Tests This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/designate-tempest-plugin Download the package from: https://tarballs.openstack.org/designate-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate-tempest-plugin 0.20.0..0.21.0 -------------------------------------------------- a392284 Fix "ttl" typos 2c42109 Add test_not_existing_project_id test d1c54e3 Fix test_show_zone_impersonate_another_project 1e73301 Increase dns lookup timeout 6eb43b3 Add a stable/bobcat BIND9 job 7705076 Use reasonable sizes for negative tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +++++++ designate_tempest_plugin/config.py | 4 ++-- 4 files changed, 24 insertions(+), 10 deletions(-)

1 0

manila-tempest-plugin 2.1.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We joyfully announce the release of: manila-tempest-plugin 2.1.0: Tempest plugin manila-tempest-plugin This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 2.0.0..2.1.0 --------------------------------------------- 4644870 Remove unused babel.cfg cb9fc3d Ceph-native job change 541c6cd Fixed Share server migration test related to CIFS. ac3c750 Stop skipping cephfs snapshot cloning test 2c06e81 Change the expected status response from Forbidden to NotFound 192d408 Optimize the dd command to improve performance 1ba0a8d Re-enable IPv4 scenario tests in LVM driver job 7cafa4c Stop skipping test on volume existence detection Diffstat (except docs and test files) ------------------------------------- babel.cfg | 2 -- .../api/admin/test_share_servers_migration.py | 6 ++-- zuul.d/manila-tempest-jobs.yaml | 33 ++++++++-------------- 12 files changed, 55 insertions(+), 56 deletions(-)

1 0

neutron-tempest-plugin 2.6.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We eagerly announce the release of: neutron-tempest-plugin 2.6.0: Tempest plugin for Neutron Project This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron-tempest-plugin Download the package from: https://tarballs.openstack.org/neutron-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-tempest-plugin 2.5.0..2.6.0 ---------------------------------------------- ffcc017 devstack: Update enabled services 71a7324 Fix network sorting in API tests 873b715 Remove duplicate setup in NetworksIpAvailabilityIPv6Test class 63396f0 Add API test for normalized CIDR attribute in the SG rule eec234d Add test_port_shut_down API test 366a515 [ovn] Enable IPv6 metadata tests for OVN a1f654a [Default SG rules] Test to check if SG rules are created from template 969d66e Update the contributor information 052808c Fix importing security group tests 17c48d6 Add VNaaS OVN job to the project f2e985e Add test documentation for docs tox target bc84489 Remove test duplication between tempest and ntp NetworksTestDHCPv6 7944b08 Use default RBAC policies in other projects together with Neutron policies af70af3 Test job for VPNaaS on OVN 608b85f Revert "Revert "[S-RBAC] Switch to new policies by default"" 9aa8eb4 Replace cirros image versions not cached in the CI 1945f92 Revert "Temporary turn off l3_ha in ovs/lb master/bobcat jobs" 55f1f92 Add playbooks to irrelevant-files 7f679d3 Include legacy_ebtables for LinuxBridge Jammy jobs aa22c9e New basic API tests for the default SG rules templates CRUDs e4a1f53 Turn off host-passthrough in scenario jobs a2dff86 Add job definitions for 2023.2 (Bobcat) branch 97409c6 Use RE2 compatible regex for branches 209d363 Temporary turn off l3_ha in ovs/lb master/bobcat jobs 99c85da Remove test duplications between tempest and n-t-p plugin d8ed3fb Remove test duplication between tempest and n-t-p RoutersDVRTest Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- CONTRIBUTING.rst | 21 +- README.rst | 2 +- .../api/admin/test_default_security_group_rules.py | 313 +++++++++++++++++++++ .../api/admin/test_routers_dvr.py | 105 ------- neutron_tempest_plugin/api/base.py | 32 ++- neutron_tempest_plugin/api/test_dhcp_ipv6.py | 101 ------- .../api/test_extra_dhcp_options.py | 106 ------- .../api/test_network_ip_availability.py | 5 - neutron_tempest_plugin/api/test_ports.py | 42 ++- neutron_tempest_plugin/api/test_security_groups.py | 51 +++- neutron_tempest_plugin/common/shell.py | 12 +- neutron_tempest_plugin/common/ssh.py | 2 +- neutron_tempest_plugin/common/utils.py | 2 +- .../scenario/test_simple_bgp.py | 38 +-- .../scenario/test_connectivity.py | 27 +- neutron_tempest_plugin/scenario/test_floatingip.py | 2 +- .../scenario/test_internal_dns.py | 4 +- .../scenario/test_security_groups.py | 19 +- .../services/network/json/network_client.py | 32 +++ neutron_tempest_plugin/vpnaas/api/test_vpnaas.py | 7 +- .../vpnaas/scenario/test_vpnaas.py | 58 ++-- playbooks/linuxbridge-scenario-pre-run.yaml | 2 +- tox.ini | 9 +- zuul.d/2023_2_jobs.yaml | 269 ++++++++++++++++++ zuul.d/base-nested-switch.yaml | 8 +- zuul.d/master_jobs.yaml | 161 +++++++++-- zuul.d/project.yaml | 31 +- 32 files changed, 1042 insertions(+), 449 deletions(-)

1 0

magnum-tempest-plugin 2.2.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We joyfully announce the release of: magnum-tempest-plugin 2.2.0: Tempest plugin for Magnum Project This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/magnum-tempest-plugin Download the package from: https://tarballs.openstack.org/magnum-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum-tempest-plugin 2.1.0..2.2.0 --------------------------------------------- 2fe075a Add job for cluster tests 4320429 Drop xena jobs after xena EOL Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 64 +++++++++--- magnum_tempest_plugin/common/base.py | 27 ++++- magnum_tempest_plugin/common/config.py | 11 +- magnum_tempest_plugin/common/datagen.py | 5 +- magnum_tempest_plugin/common/templates/cluster.py | 113 ++++++++++++++++----- magnum_tempest_plugin/common/utils.py | 36 +++++++ magnum_tempest_plugin/config.py | 6 ++ requirements.txt | 1 + 11 files changed, 247 insertions(+), 93 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 27b2ae4..1ab9ded 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9 @@ oslo.log>=3.36.0 # Apache-2.0 +kubernetes>=26.0.0 # Apache-2.0 \ No newline at end of file

1 0

heat-tempest-plugin 2.1.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We are tickled pink to announce the release of: heat-tempest-plugin 2.1.0: OpenStack Orchestration Tempest Plugin This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/heat-tempest-plugin Download the package from: https://tarballs.openstack.org/heat-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/heat/+bugs For more details, please see below. Changes in heat-tempest-plugin 2.0.0..2.1.0 ------------------------------------------- 70e516a Bump hacking 3943da9 Update stable branch jobs 3dbadbc Remove unnecessary setup_hook 0f0f893 Remove note about old pip's behavior 5047e21 Remove tests requiring Neutron LBaaS 1e6b388 Execute volume tests only when cinder is available dfb9739 Remove six Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 +- heat_tempest_plugin/common/remote_client.py | 8 +- heat_tempest_plugin/common/test.py | 27 +++- .../templates/app_server_lbv2_neutron.yaml | 76 ---------- .../templates/test_autoscaling_lb_neutron.yaml | 117 --------------- .../templates/test_autoscaling_lbv2_neutron.yaml | 120 ---------------- setup.cfg | 16 +-- test-requirements.txt | 10 +- 20 files changed, 45 insertions(+), 825 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 23614af..68f7957 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -6,5 +2 @@ -hacking>=2.0,<2.1.0 # Apache-2.0 -# remove this pyflakes from here once you bump the -# hacking to 3.2.0 or above. hacking 3.2.0 takes -# care of pyflakes version compatibilty. -pyflakes>=2.1.1 +hacking>=6.1.0,<6.2.0 # Apache-2.0

1 0

tempest 37.0.0 (caracal)
by no-reply＠openstack.org 19 Feb '24

19 Feb '24

We are happy to announce the release of: tempest 37.0.0: OpenStack Integration Testing This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 37.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2024.1 development cycle to mark the end of support for Yoga release in Tempest. After this release, Tempest will support below OpenStack Releases: * 2023.2 * 2023.1 * Zed Current development of Tempest is for OpenStack 2024.1 development cycle. New Features ************ * A new config option in the default section, resource_name_prefix, is added to allow users to customize the name (specifically the prefix) of the resources created by Tempest during a test run. By default it is set to tempest. Tempest cleanup CLI will then use this config option to cleanup only the resources that match the prefix. Make sure this prefix does not match with the resource name you do not want Tempest cleanup CLI to delete. * Add delete image from specific store API to image V2 client * A new tempest.conf option called backup_driver was added to tempest to indicate which backup driver is used by Cinder. This option allows us to create a resource properly and avoid cleanup issues when Swift is used as the backup driver. Upgrade Notes ************* * The following deprecated options in the "[identity-feature- enabled]" section have been removed. Project tags API and application credentials API are now always tested if identity v3 API is available. * "project_tag" * "application_credentials" * Default value of the "[identity-feature-enabled] access_rule" option has been changed from "False" to "True" and now the access rule API is always tested when identity API is available. * The deprecated "[compute-feature-enabled] block_migrate_cinder_iscsi" option has been removed. Now the "[compute-feature-enabled] block_migration_for_live_migration" option is solely used to determine when to run block migration based tests during live migration. * The deprecated "[compute-feature-enabled] nova_cert" option has been removed. The nova-cert service was removed from nova in 16.0.0 release. Tests of compute root certificates API have also been removed. * The deprecated "[compute-feature-enabled] rdp_console" config option has been removed. * The deprecated "[compute-feature-enabled] vnc_server_header" option has been removed. Deprecation Notes ***************** * The Keystone access_rule is enabled by default since Train release and we no longer need a separate config in Tempest to enable it. Therefore the "[identity-feature-enabled] access_rule" option has been deprecated and will be removed in a future release. Changes in tempest 36.0.0..37.0.0 --------------------------------- 7edc9f524 Pin stable/2023.2 constraint in tox to release 37.0.0 a7b530ce7 End support for stable/yoga 86ee115f9 Increase timeout for tempest-all job d76178e68 General doc updates 73005a145 Clean up [identity-feature-enable] options for old releases 304f7d713 Remove rdp_console option 74c19b3a5 Remove nova_cert option b9f775d6d Document choices using oslo.config interface 4c73e54f9 Remove [compute-feature-enabled] vnc_server_header 019e04c6e Remove [compute-feature-enabled] block_migrate_cinder_iscsi 3101be67f Use lowercase names for swift/S3 containers bd9cbd35c Add delete image from specific store API 213d0a4c6 Pass resource_name_prefix from tests 17053d69e Adding tempest prefix option in tempest.conf a0b161bbd Handle split kernel/ramdisk images 4e49975c9 Fix of wrong parsing of flavour name and disk_over_commit parameter 3f233b24d Report original request ID on failed shelve cc0e9b181 Switch Neutron RBAC flag in testing 2bb851918 Remove tap-as-a-service-tempest-plugin 14f893e82 Skip test_dhcp_agent_scheduler tests if there is no DHCP agent available 88d366546 Fix test_show_host_detail to support installation with ironic 553d91b51 Fix cleanup for object_storage tests 433dbdc4b Add unit tests to increase coverage 270e4fe7b Make greande-skip-level job voting on current master 5c64e3913 Add Tempest gate job for stable/2023.2 2ce81e518 Create releasenotes page for tempest 35.0.0, 36.0.0 6a122ead5 Switch to the master constraint in tox.ini bd76355ef Verify that instance can boot after volume retype with migration Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- HACKING.rst | 4 +- README.rst | 1 - ...name_prefix-config-option-26e0b7cfeffc48f9.yaml | 10 + ...e-from-specific-store-api-84c0ecd50724f6de.yaml | 4 + ...ckup-driver-config-option-5f12e71c75b7f01b.yaml | 7 + .../end-of-support-of-yoga-4ad45e91fe893024.yaml | 12 ++ ...ature-opt-cleanup-caracal-7afd283855a07025.yaml | 21 ++ ...lock-migrate-cinder-iscsi-882da88096019f3c.yaml | 8 + .../notes/remove-nova_cert-e2ee70a40e117e8a.yaml | 6 + .../notes/remove-rdp_console-34e11f58d525905a.yaml | 5 + .../remove-vnc-server-header-1a9731ba10242603.yaml | 5 + releasenotes/source/index.rst | 2 + releasenotes/source/v35.0.0.rst | 6 + releasenotes/source/v36.0.0.rst | 6 + tempest/README.rst | 12 +- tempest/api/README.rst | 12 +- tempest/api/compute/admin/test_agents.py | 4 +- .../api/compute/admin/test_aggregates_negative.py | 15 +- tempest/api/compute/admin/test_create_server.py | 3 +- tempest/api/compute/admin/test_flavors.py | 26 ++- .../api/compute/admin/test_flavors_extra_specs.py | 10 +- .../admin/test_flavors_extra_specs_negative.py | 6 +- tempest/api/compute/admin/test_hosts.py | 4 +- tempest/api/compute/admin/test_keypairs_v210.py | 6 +- tempest/api/compute/admin/test_live_migration.py | 12 +- .../compute/admin/test_live_migration_negative.py | 3 +- tempest/api/compute/admin/test_migrations.py | 4 +- tempest/api/compute/admin/test_quotas.py | 12 +- tempest/api/compute/admin/test_quotas_negative.py | 5 +- tempest/api/compute/admin/test_security_groups.py | 14 +- tempest/api/compute/admin/test_servers.py | 7 +- tempest/api/compute/admin/test_volume.py | 5 + tempest/api/compute/base.py | 33 +++- .../api/compute/certificates/test_certificates.py | 40 ---- .../api/compute/flavors/test_flavors_negative.py | 3 +- tempest/api/compute/images/test_image_metadata.py | 7 +- tempest/api/compute/images/test_images.py | 15 +- tempest/api/compute/images/test_images_negative.py | 20 +- .../api/compute/images/test_images_oneserver.py | 7 +- .../api/compute/images/test_list_image_filters.py | 6 +- tempest/api/compute/keypairs/base.py | 6 +- tempest/api/compute/keypairs/test_keypairs.py | 12 +- .../api/compute/keypairs/test_keypairs_negative.py | 10 +- tempest/api/compute/keypairs/test_keypairs_v22.py | 6 +- .../test_security_group_rules_negative.py | 9 +- .../security_groups/test_security_groups.py | 11 +- .../test_security_groups_negative.py | 27 ++- .../api/compute/servers/test_attach_interfaces.py | 8 +- tempest/api/compute/servers/test_create_server.py | 4 +- .../servers/test_create_server_multi_nic.py | 4 +- tempest/api/compute/servers/test_device_tagging.py | 27 ++- .../compute/servers/test_list_server_filters.py | 12 +- tempest/api/compute/servers/test_server_actions.py | 20 +- tempest/api/compute/servers/test_server_group.py | 9 +- tempest/api/compute/servers/test_server_tags.py | 26 ++- tempest/api/compute/servers/test_servers.py | 13 +- .../compute/servers/test_servers_microversions.py | 6 +- .../api/compute/servers/test_servers_negative.py | 6 +- .../api/compute/volumes/test_volume_snapshots.py | 4 +- tempest/api/compute/volumes/test_volumes_get.py | 4 +- .../api/compute/volumes/test_volumes_negative.py | 20 +- tempest/api/identity/admin/v2/test_endpoints.py | 18 +- tempest/api/identity/admin/v2/test_roles.py | 9 +- .../api/identity/admin/v2/test_roles_negative.py | 18 +- tempest/api/identity/admin/v2/test_services.py | 27 ++- .../api/identity/admin/v2/test_tenant_negative.py | 12 +- tempest/api/identity/admin/v2/test_tenants.py | 18 +- tempest/api/identity/admin/v2/test_tokens.py | 12 +- tempest/api/identity/admin/v2/test_users.py | 12 +- .../api/identity/admin/v2/test_users_negative.py | 12 +- tempest/api/identity/admin/v3/test_credentials.py | 22 ++- .../identity/admin/v3/test_default_project_id.py | 6 +- .../identity/admin/v3/test_domain_configuration.py | 9 +- tempest/api/identity/admin/v3/test_domains.py | 18 +- .../api/identity/admin/v3/test_domains_negative.py | 6 +- .../api/identity/admin/v3/test_endpoint_groups.py | 34 ++-- tempest/api/identity/admin/v3/test_endpoints.py | 28 ++- .../identity/admin/v3/test_endpoints_negative.py | 19 +- tempest/api/identity/admin/v3/test_groups.py | 13 +- tempest/api/identity/admin/v3/test_inherits.py | 11 +- .../api/identity/admin/v3/test_list_projects.py | 10 +- tempest/api/identity/admin/v3/test_list_users.py | 7 +- .../api/identity/admin/v3/test_oauth_consumers.py | 9 +- tempest/api/identity/admin/v3/test_policies.py | 16 +- tempest/api/identity/admin/v3/test_project_tags.py | 9 +- tempest/api/identity/admin/v3/test_projects.py | 27 ++- .../identity/admin/v3/test_projects_negative.py | 9 +- tempest/api/identity/admin/v3/test_regions.py | 18 +- tempest/api/identity/admin/v3/test_roles.py | 24 ++- tempest/api/identity/admin/v3/test_services.py | 26 ++- tempest/api/identity/admin/v3/test_tokens.py | 6 +- tempest/api/identity/admin/v3/test_trusts.py | 11 +- tempest/api/identity/admin/v3/test_users.py | 11 +- .../api/identity/admin/v3/test_users_negative.py | 3 +- tempest/api/identity/base.py | 41 ++-- tempest/api/identity/v3/test_access_rules.py | 8 +- tempest/api/image/base.py | 42 +++- tempest/api/image/v2/admin/test_image_caching.py | 4 +- tempest/api/image/v2/admin/test_image_task.py | 9 +- tempest/api/image/v2/admin/test_images.py | 63 +++++- .../test_images_metadefs_namespace_objects.py | 10 +- .../test_images_metadefs_namespace_properties.py | 10 +- .../admin/test_images_metadefs_namespace_tags.py | 9 +- .../v2/admin/test_images_metadefs_namespaces.py | 6 +- tempest/api/image/v2/test_images.py | 56 ++---- tempest/api/image/v2/test_images_tags.py | 6 +- tempest/api/image/v2/test_images_tags_negative.py | 9 +- .../api/network/admin/test_dhcp_agent_scheduler.py | 9 + .../admin/test_external_network_extension.py | 3 +- .../admin/test_external_networks_negative.py | 4 +- .../api/network/admin/test_metering_extensions.py | 9 +- tempest/api/network/admin/test_ports.py | 15 +- tempest/api/network/admin/test_routers.py | 16 +- tempest/api/network/admin/test_routers_dvr.py | 15 +- tempest/api/network/admin/test_routers_negative.py | 3 +- tempest/api/network/base.py | 7 +- tempest/api/network/base_security_groups.py | 6 +- tempest/api/network/test_allowed_address_pair.py | 12 +- tempest/api/network/test_extra_dhcp_options.py | 9 +- tempest/api/network/test_floating_ips.py | 9 +- tempest/api/network/test_networks.py | 15 +- tempest/api/network/test_networks_negative.py | 7 +- tempest/api/network/test_ports.py | 50 +++-- tempest/api/network/test_routers.py | 25 ++- tempest/api/network/test_routers_negative.py | 18 +- tempest/api/network/test_security_groups.py | 6 +- tempest/api/network/test_subnetpools_extensions.py | 6 +- tempest/api/network/test_tags.py | 16 +- tempest/api/object_storage/base.py | 55 +----- tempest/api/object_storage/test_account_bulk.py | 6 +- tempest/api/object_storage/test_account_quotas.py | 3 +- .../api/object_storage/test_account_services.py | 7 +- tempest/api/object_storage/test_container_acl.py | 6 +- .../object_storage/test_container_acl_negative.py | 30 ++- .../api/object_storage/test_container_quotas.py | 11 +- .../api/object_storage/test_container_services.py | 36 ++-- .../test_container_services_negative.py | 9 +- tempest/api/object_storage/test_container_sync.py | 15 +- tempest/api/object_storage/test_object_formpost.py | 6 +- .../test_object_formpost_negative.py | 6 +- tempest/api/object_storage/test_object_services.py | 113 +++++++---- tempest/api/object_storage/test_object_slo.py | 11 +- .../test_object_temp_url_negative.py | 3 +- tempest/api/object_storage/test_object_version.py | 16 +- tempest/api/volume/admin/test_group_snapshots.py | 25 ++- tempest/api/volume/admin/test_group_types.py | 20 +- tempest/api/volume/admin/test_groups.py | 18 +- tempest/api/volume/admin/test_multi_backend.py | 8 +- tempest/api/volume/admin/test_qos.py | 9 +- tempest/api/volume/admin/test_snapshot_manage.py | 10 +- tempest/api/volume/admin/test_user_messages.py | 10 +- tempest/api/volume/admin/test_volume_manage.py | 3 +- .../api/volume/admin/test_volume_quota_classes.py | 9 +- tempest/api/volume/admin/test_volume_types.py | 20 +- tempest/api/volume/admin/test_volumes_backup.py | 7 +- tempest/api/volume/base.py | 53 +++++- tempest/api/volume/test_volumes_actions.py | 3 +- tempest/api/volume/test_volumes_backup.py | 42 ++-- tempest/api/volume/test_volumes_get.py | 11 +- tempest/api/volume/test_volumes_negative.py | 31 ++- tempest/api/volume/test_volumes_snapshots.py | 3 +- .../api/volume/test_volumes_snapshots_negative.py | 8 +- tempest/common/compute.py | 15 +- tempest/common/object_storage.py | 64 +++++++ tempest/common/waiters.py | 30 +++ tempest/config.py | 77 +++----- tempest/lib/services/image/v2/images_client.py | 12 ++ tempest/scenario/README.rst | 9 +- tempest/scenario/manager.py | 113 +++++++++-- .../scenario/test_network_advanced_server_ops.py | 15 +- tempest/scenario/test_network_qos_placement.py | 12 +- tempest/scenario/test_security_groups_basic_ops.py | 15 +- tempest/scenario/test_unified_limits.py | 4 +- tempest/scenario/test_volume_boot_pattern.py | 10 +- tempest/scenario/test_volume_migrate_attached.py | 115 +++++++++-- .../scenario/test_aggregates_basic_ops.py | 10 +- .../lib/services/image/v2/test_images_client.py | 39 ++++ tools/generate-tempest-plugins-list.py | 1 - tox.ini | 8 +- zuul.d/integrated-gate.yaml | 71 +++++-- zuul.d/project.yaml | 24 +-- zuul.d/stable-jobs.yaml | 28 +-- 198 files changed, 2516 insertions(+), 914 deletions(-)

1 0

kayobe 13.5.0 (zed)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are psyched to announce the release of: kayobe 13.5.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.5.0 ^^^^^^ Deprecation Notes * Support for the "devicemapper" Docker storage driver is deprecated following its removal from Docker Engine 25.0. Support will be fully removed in the Caracal 16.0.0 release. Operators using "devicemapper" should ensure that a compatible version of Docker Engine is installed (i.e. release 24.x or below). Changes in kayobe 13.4.0..13.5.0 -------------------------------- fbefef43 Deprecate devicemapper due to removal in Docker Diffstat (except docs and test files) ------------------------------------- ansible/docker-devicemapper.yml | 12 ++++++++++++ .../kayobe-overcloud-host-configure-base/globals.yml.j2 | 4 ++++ playbooks/kayobe-overcloud-host-configure-base/pre.yml | 5 +++++ .../deprecate-docker-devicemapper-234447328a24094f.yaml | 8 ++++++++ 4 files changed, 29 insertions(+)

1 0

kolla-ansible 16.4.0 (antelope)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are satisfied to announce the release of: kolla-ansible 16.4.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.4.0 ^^^^^^ Bug Fixes * Fixes enabled usage audit notifications when they are not needed. See LP##2049503. * Fixes a bug where Octavia configuration couldn't be generated for Antelope release while running Zed release kolla toolbox. LP#2049364 Changes in kolla-ansible 16.3.0..16.4.0 --------------------------------------- 967aa7a29 Enable instance usage audit only when ceilometer is enabled 5b38eae6e Correct glance.conf example in external Ceph guide 0d51e4256 Support older Octavia var names in Antelope Diffstat (except docs and test files) ------------------------------------- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 2 +- ansible/roles/octavia/tasks/get_resources_info.yml | 4 ++-- ansible/roles/octavia/templates/octavia.conf.j2 | 4 ++-- .../notes/disable-usage-audit-notifications-6e63588bdcc48603.yaml | 6 ++++++ .../notes/fix-octavia-antelope-gen-config-e3f2b79c142c659e.yaml | 6 ++++++ 7 files changed, 19 insertions(+), 7 deletions(-)

1 0

kayobe 15.2.0 (bobcat)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are chuffed to announce the release of: kayobe 15.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.2.0 ^^^^^^ Deprecation Notes * Support for the "devicemapper" Docker storage driver is deprecated following its removal from Docker Engine 25.0. Support will be fully removed in the Caracal 16.0.0 release. Operators using "devicemapper" should ensure that a compatible version of Docker Engine is installed (i.e. release 24.x or below). Changes in kayobe 15.1.0..15.2.0 -------------------------------- be958047 Mark kayobe-tox-ansible job as non-voting bd16d293 Deprecate devicemapper due to removal in Docker Diffstat (except docs and test files) ------------------------------------- ansible/docker-devicemapper.yml | 12 ++++++++++++ .../kayobe-overcloud-host-configure-base/overrides.yml.j2 | 4 ++++ .../deprecate-docker-devicemapper-234447328a24094f.yaml | 8 ++++++++ zuul.d/project.yaml | 4 ++-- 4 files changed, 26 insertions(+), 2 deletions(-)

1 0

kolla-ansible 15.5.0 (zed)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are pumped to announce the release of: kolla-ansible 15.5.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.5.0 ^^^^^^ Bug Fixes * Fixes enabled usage audit notifications when they are not needed. See LP##2049503. Changes in kolla-ansible 15.4.0..15.5.0 --------------------------------------- 673eda91a Enable instance usage audit only when ceilometer is enabled 45b831f73 Correct glance.conf example in external Ceph guide Diffstat (except docs and test files) ------------------------------------- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 2 +- .../notes/disable-usage-audit-notifications-6e63588bdcc48603.yaml | 6 ++++++ 4 files changed, 9 insertions(+), 3 deletions(-)

1 0

kolla-ansible 17.2.0 (bobcat)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are glad to announce the release of: kolla-ansible 17.2.0: Ansible Deployment of Kolla containers This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.2.0 ^^^^^^ Bug Fixes * Fixes enabled usage audit notifications when they are not needed. See LP##2049503. * Fixes an idempotency issue in the OpenSearch upgrade tasks where subsequent runs of kolla-ansible upgrade would leave shard allocation disabled. LP#2049512 Changes in kolla-ansible 17.1.0..17.2.0 --------------------------------------- 0fb1067e1 Enable instance usage audit only when ceilometer is enabled d30ee119f Fix OpenSearch upgrade tasks idempotency 90c5df1ce use 2023.2 images in stable/2023.2 branch Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 2 +- ansible/roles/opensearch/handlers/main.yml | 41 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 35 ------------------ etc/kolla/globals.yml | 2 +- ...usage-audit-notifications-6e63588bdcc48603.yaml | 6 ++++ ...earch-upgrade-idempotency-4d20a8102717cc56.yaml | 6 ++++ 8 files changed, 57 insertions(+), 39 deletions(-)

1 0

kayobe 14.4.0 (antelope)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are glad to announce the release of: kayobe 14.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.4.0 ^^^^^^ Deprecation Notes * Support for the "devicemapper" Docker storage driver is deprecated following its removal from Docker Engine 25.0. Support will be fully removed in the Caracal 16.0.0 release. Operators using "devicemapper" should ensure that a compatible version of Docker Engine is installed (i.e. release 24.x or below). Changes in kayobe 14.3.0..14.4.0 -------------------------------- 56ab41c0 Mark kayobe-tox-ansible job as non-voting d397ceca Deprecate devicemapper due to removal in Docker Diffstat (except docs and test files) ------------------------------------- ansible/docker-devicemapper.yml | 12 ++++++++++++ .../kayobe-overcloud-host-configure-base/overrides.yml.j2 | 4 ++++ .../deprecate-docker-devicemapper-234447328a24094f.yaml | 8 ++++++++ zuul.d/project.yaml | 4 ++-- 4 files changed, 26 insertions(+), 2 deletions(-)

1 0

kolla 17.2.0 (bobcat)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are amped to announce the release of: kolla 17.2.0: Kolla OpenStack Deployment This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.2.0 ^^^^^^ Bug Fixes * Fixes the issue with command not found within letsencrypt-lego container. LP#2051111 Changes in kolla 17.1.0..17.2.0 ------------------------------- a75836c6c [follow-up] Use full binary path when invoking ip 21102960c Use full binary path when invoking ip 60c95970b trivial: fix typos in let's encrypt status logs Diffstat (except docs and test files) ------------------------------------- .../notes/fix-letsencrypt-ip-command-not-found-3c455acaf743409e.yaml | 5 +++++ 4 files changed, 9 insertions(+), 4 deletions(-)

1 0

kolla 15.5.0 (zed)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are pleased to announce the release of: kolla 15.5.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 15.4.0..15.5.0 ------------------------------- de25d65c1 stable-only: Drop upgrade testing Diffstat (except docs and test files) ------------------------------------- .zuul.d/debian.yaml | 2 -- .zuul.d/ubuntu.yaml | 4 ---- 2 files changed, 6 deletions(-)

1 0

magnum 15.0.2 (zed)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We are overjoyed to announce the release of: magnum 15.0.2: Container Management project for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 15.0.1..15.0.2 -------------------------------- e79907c5 Move the chmod function before the write and flush functions to prevent sensitive information leakage. c671d8ba Missing load balancer health monitors fix 843be2aa Fix pods unable to send traffic to ClusterIP fe83b5b8 Add `-p` param to `mkdir` in agent startup script bafe6a10 Fix pep8 gate 003b2a66 Remove stdout argument from coredns log 0f579f70 Fix pods stuck terminating. 9e584380 Support tox4 Diffstat (except docs and test files) ------------------------------------- magnum/common/urlfetch.py | 10 +--------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- .../kubernetes/fragments/configure-kubernetes-master.sh | 9 ++++++--- .../kubernetes/fragments/configure-kubernetes-minion.sh | 10 +++++++--- .../common/templates/kubernetes/fragments/core-dns-service.sh | 2 +- magnum/drivers/common/templates/lb_api.yaml | 2 +- magnum/drivers/common/templates/lb_etcd.yaml | 2 +- magnum/drivers/common/templates/swarm/fragments/make-cert.py | 9 +++++---- magnum/drivers/heat/template_def.py | 5 +++-- .../k8s_coreos_v1/templates/fragments/enable-coredns.yaml | 2 +- magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json | 2 +- .../unit/conductor/handlers/test_k8s_cluster_conductor.py | 2 +- tox.ini | 8 +++++--- 14 files changed, 40 insertions(+), 36 deletions(-)

1 0

magnum 14.1.2 (yoga)
by no-reply＠openstack.org 16 Feb '24

16 Feb '24

We exuberantly announce the release of: magnum 14.1.2: Container Management project for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 14.1.1..14.1.2 -------------------------------- 312aa6a8 Move the chmod function before the write and flush functions to prevent sensitive information leakage. Diffstat (except docs and test files) ------------------------------------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-)

1 0

python-manilaclient 4.1.3 (zed)
by no-reply＠openstack.org 15 Feb '24

15 Feb '24

We are excited to announce the release of: python-manilaclient 4.1.3: Client library for OpenStack Manila API. This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.1.3 ^^^^^ Bug Fixes * Fixed default share type lookup associated with the "openstack share create" command. The lookup now resolves default share types correctly even on environments where the default type isn't named "default". See launchpad bug #2030686 (https://launchpad.net/bugs/2030686) for more details. Changes in python-manilaclient 4.1.2..4.1.3 ------------------------------------------- 145259b Fix "test_share_access_show" osc functional test 6e494f1 Enable the option to return the response body 6647b2e Fix default share type resolution in OSC Diffstat (except docs and test files) ------------------------------------- manilaclient/base.py | 9 +++++-- manilaclient/osc/v2/share.py | 4 +-- .../functional/osc/test_share_access_rules.py | 2 +- manilaclient/v2/share_types.py | 6 ++--- manilaclient/v2/shares.py | 29 +++++++++++++--------- ...-fix-default-share-lookup-cc7e592a0dc855e1.yaml | 8 ++++++ 8 files changed, 43 insertions(+), 23 deletions(-)

1 0

manila 14.2.0 (yoga)
by no-reply＠openstack.org 12 Feb '24

12 Feb '24

We jubilantly announce the release of: manila 14.2.0: Shared Storage for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 14.2.0 ^^^^^^ Bug Fixes * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue preventing the storage system from proper clean up unused SnapMirror snapshots after a replica promote, significantly increasing the amount of space consumed in ONTAP volumes by snapshots. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * Share replicas in state *error_deleting* are now skipped during periodic updates. For more details, please refer to launchpad bug #2024556 (https://bugs.launchpad.net/manila/+bug/2024556) * Share server backend details set function adds db records without checking existing entries. This results in duplicate records for the combination of given share server id and key. Fixed it by updating records if already exist else creating new. See the launchpad bug 2024658 (https://bugs.launchpad.net/manila/+bug/2024658) for more details. * The "manage" API for snapshots now validates the format of "provider_location" and "share_id" fields and handles errors appropriately. These fields are expected to contain string values. * The "updated_at" field is correctly set on share and snapshot access rules when an update has been made on the database. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. * bug #2025649 (https://bugs.launchpad.net/manila/+bug/2025649) Fixed share server API error message. Changes in manila 14.1.1..14.2.0 -------------------------------- 84111ad7c Change status and error handling for /shares API 202fa0b4a Fix policy check in metadata APIs f878e15bc [rbac] Pull up policy checks on share/snapshot APIs 67187c28f Shorten snapshots names in CephFS drivers 739301f4d Don't fail remove-export in NFS-Ganesha deee9ae1e adds share server uuid on migration cancel 4833319ca Fix error message from share server API dd0492623 Fix duplicate entries in share_server_backend_details 1b9d500f2 Set "updated_at" field on access rules f533bdb94 Validate provider_location while managing snapshot 65bcc2710 NetApp ONTAP: Fix SnapMirror snapshots not being cleaned up 4c921214f Add default to read_deleted in context's from_dict 4597939d9 skip periodic update on replicas in 'error_deleting' b73958504 [coordination] backend_url should be secret Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_servers.py | 5 +- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 20 +++- manila/api/v2/share_snapshots.py | 3 + manila/api/v2/shares.py | 5 + manila/context.py | 2 +- manila/coordination.py | 1 + manila/db/sqlalchemy/api.py | 49 ++++++++-- manila/exception.py | 4 + manila/share/api.py | 13 +-- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + .../netapp/dataontap/cluster_mode/data_motion.py | 30 ++++++ .../netapp/dataontap/cluster_mode/lib_base.py | 9 ++ manila/share/manager.py | 1 + manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_data_motion.py | 54 +++++++++++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 42 +++++++++ ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...-snapshots-not-cleaned-up-63cc98cd468adbd1.yaml | 9 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...p-error-deleting-replicas-aa2ef4154d5e38f6.yaml | 6 ++ ...re-server-backend-details-adf45b417d45b437.yaml | 8 ++ ...vider-location-validation-b6d1e977f50643bb.yaml | 6 ++ ...t-updated_at-access-rules-a382a3e352f3ef7d.yaml | 5 + ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ ..._share_server_api_2025649-f818f594e97c59e6.yaml | 6 ++ 37 files changed, 473 insertions(+), 121 deletions(-)

1 0

metalsmith 1.8.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: metalsmith 1.8.1: Deployment and Scheduling tool for Bare Metal This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.8.0..1.8.1 ---------------------------------- 47f5953 Stable-Only: CI: Force install an appropriate openstacsdk version 176f48e stable-only: Constrain the upper Ansible version cc388a4 test_provision: don't assert provision_node call order 392593d list_instances - cache allocations ea3a920 Get ports by 'binding:host_id' query filter b5f695f Use a network cache in Instance 0e839b0 Fixes for tox 4.0 f586ede Allow to use Ansible OpenStack Col. 1.x.x with openstacksdk >=0.99.0 008425a Update TOX_CONSTRAINTS_FILE for stable/zed 8e7fba3 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + metalsmith/_instance.py | 21 +++++++------ metalsmith/_provisioner.py | 25 ++++++++++++---- metalsmith/test/test_instance.py | 8 ++--- metalsmith/test/test_metalsmith_instances.py | 2 +- metalsmith/test/test_provisioner.py | 7 +++-- .../modules/metalsmith_instances.py | 9 ++++++ .../roles/metalsmith_deployment/defaults/main.yml | 2 +- playbooks/integration/initial-setup.yaml | 12 ++++++++ test-requirements.txt | 2 +- tox.ini | 34 +++++++++++++++++----- 11 files changed, 88 insertions(+), 35 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 933cf4f..22d3b31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ stestr>=1.0.0 # Apache-2.0 -ansible>=2.8 +ansible>=2.8,<=2.9

1 0

ironic 21.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are thrilled to announce the release of: ironic 21.1.1: OpenStack Bare Metal Provisioning This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.1.1 ^^^^^^ Upgrade Notes ************* * When Ironic operator uses irmc driver against Fujitsu server which runs iRMC version S6 2.00 or later, operator may need to set Redfish parameters in "driver_info" so this fix can operate properly or operator should enable IPMI over LAN through BMC settings, if possible. Bug Fixes ********* * Fixes Ironic integration with Cinder because of changes which resulted as part of the recent Security related fix in bug 2004555 (https://launchpad.net/bugs/2004555) The work in Ironic to track this fix was logged in bug 2019892 (https://bugs.launchpad.net/ironic/+bug/2019892) Ironic now sends a service token to Cinder, which allows for access restrictions added as part of the original CVE-2023-2088 fix to be appropriately bypassed. Ironic was not vulnerable, but the restrictions added as a result did impact Ironic's usage. This is because Ironic volume attachments are not on a shared "compute node", but instead mapped to the physical machines and Ironic handles the attachment life- cycle after initial attachment. * When aborting cleaning, the "last_error" field is no longer initially empty. It is now populated on the state transition to "clean failed". * When cleaning or deployment fails, the "last_error" field is no longer temporary set to "None" while the power off action is running. * Fixes "Invalid cross-device link" in some cases when using "file://" image URLs. * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes bug of iRMC driver in parse_driver_info where, if FIPS is enabled, SNMP version is always required to be version 3 even though iRMC driver's xxx_interface doesn't use SNMP actually. * Fixes a firmware incompatibility issue with iRMC versions S6 2.00 and later now doesn't support IPMI over LAN by default. To deal with this problem, irmc driver first tries IPMI operation then, if IPMI operation fails, it tries Redfish API of Fujitsu server. The operator must set Redfish parameters in the "driver_info" if iRMC disable or doesn't support IPMI over LAN. * Fixes "'NoneType' object is not iterable" in conductor logs for "redfish" and "idrac-redfish" RAID clean and deploy steps. The message should no longer appear. For affected nodes re-create the node or delete "raid_configs" entry from "driver_internal_info" field. * Fixes an issue in the online upgrade logic where database models for Node Traits and BIOS Settings resulted in an error when performing the online data migration. This was because these tables were originally created as extensions of the Nodes database table, and the schema of the database was slightly different enough to result in an error if there was data to migrate in these tables upon upgrade, which would have occured if an early BIOS Setting adopter had data in the database prior to upgrading to the Yoga release of Ironic. The online upgrade parameter now subsitutes an alternate primary key name name when applicable. * Fixes an issue where an agent token could be inadvertently orphaned if a node is already in the target power state when we attempt to turn the node off. * Fixes scope classification check with the "self_owned_node" policy check where it was limited to check execution with only project scoped, so system scoped users who ticked the policy endpoint would basically get an incorrect error. * Fixes the bug where provisioning a Redfish managed node fails if the BMC doesn't support EthernetInterfaces attribute, even if MAC address information is provided manually. This is done by handling of MissingAttributeError sushy exception in get_mac_addresses() method. This fix is needed to successfully provision machines such as Cisco UCSB and UCSX. * Modify iRMC driver to use ironic.conf [deploy] default_boot_mode to determine default boot_mode. * No longer re-calculates checksums for images that are already raw. Previously, it would cause significant delays in deploying raw images. * The per-node "external_http_url" setting in the driver info is now used for a boot ISO. Previously this setting was only used for a config floppy. * Fixes an issue where an agent token was being orphaned if a baremetal node timed out during cleaning operations, leading to issues where the node would not be able to establish a new token with Ironic upon future in some cases. We now always wipe the token in this case. Changes in ironic 21.1.0..21.1.1 -------------------------------- e38735cb9 Use per-node external_http_url for boot ISO ba97ec80e redfish_address - wrap_ipv6 address 1bd7ab875 [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode 4fdf65ca5 Fix self_owned_node policy check 5e2d72cbf [ci] [stable-only] Cinder fixed; make BFV job vote 907f71742 [stable-only] [CI] BFV, RBAC jobs marked non-voting 07497e1b0 Fix Cinder Integration fallout from CVE-2023-2088 c45cf2017 Handle MissingAttributeError when using OOB inspections to fetch MACs ec6c37579 Always fall back from hard linking to copying files d6b970995 Add error logging on lookup failures in the API 2b0a5575c Fix online upgrades for Bios/Traits 4481031d7 Wipe Agent Token when cleaning timeout occcurs 3d32729fb Clean out agent token even if power is already off 3e3d4e1cb Do not recalculate checksum if disk_format is not changed a4a3b31d4 Do not move nodes to CLEAN FAILED with empty last_error e928980e7 [iRMC] Handle IPMI incompatibility in iRMC S6 2.x b91d174eb Move and fix reno config for releasenotes job 728301fc2 Fix selinux context of published image hardlink be92735d7 Fix "'NoneType' object is not iterable" in RAID 1ba3d29a0 Fixes for tox 4.0 49dade88c Fix unit tests for Python 3.11 f882fa0fa Align iRMC driver with Ironic's default boot_mode ff06b3d2a Fix the invalid glance client test 17fb4f706 Update TOX_CONSTRAINTS_FILE for stable/zed e45428d35 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/lib/ironic | 2 +- ironic/api/controllers/v1/ramdisk.py | 6 +- ironic/common/cinder.py | 71 +++++- ironic/common/glance_service/image_service.py | 3 +- ironic/common/image_service.py | 35 ++- ironic/common/keystone.py | 24 +- ironic/common/policy.py | 4 +- ironic/common/states.py | 3 + ironic/common/utils.py | 23 +- ironic/conductor/cleaning.py | 26 +- ironic/conductor/manager.py | 3 +- ironic/conductor/task_manager.py | 11 +- ironic/conductor/utils.py | 19 +- ironic/conf/glance.py | 1 + ironic/db/sqlalchemy/api.py | 33 ++- ironic/drivers/modules/deploy_utils.py | 37 ++- ironic/drivers/modules/image_utils.py | 13 +- ironic/drivers/modules/irmc/common.py | 14 ++ ironic/drivers/modules/irmc/inspect.py | 89 +++++-- ironic/drivers/modules/irmc/management.py | 251 ++++++++++++++++--- ironic/drivers/modules/irmc/power.py | 57 ++++- ironic/drivers/modules/redfish/management.py | 11 +- ironic/drivers/modules/redfish/raid.py | 8 +- ironic/drivers/modules/redfish/utils.py | 3 +- .../unit/drivers/modules/irmc/test_inspect.py | 132 ++++++++-- .../unit/drivers/modules/irmc/test_management.py | 267 +++++++++++++++++++-- .../drivers/modules/redfish/test_management.py | 10 + .../unit/drivers/modules/redfish/test_raid.py | 4 + .../unit/drivers/modules/redfish/test_utils.py | 8 + .../unit/drivers/modules/test_deploy_utils.py | 73 +++++- releasenotes/config.yaml | 5 + .../notes/cinder-2019892-6b5a9de5c5f05aa6.yaml | 16 ++ .../notes/cleaning-error-5c13c33c58404b97.yaml | 8 + .../notes/cross-link-1ffd1a4958f14fd7.yaml | 5 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...nforcing-snmpv3-with-fips-e45971d363925ec3.yaml | 6 + ...2.00-ipmi-incompatibility-118484a424df02b1.yaml | 15 ++ ...pe-object-is-not-iterable-0592926d890d6c11.yaml | 7 + ...-online-version-migration-db432a7b239647fa.yaml | 14 ++ .../fix-power-off-token-wipe-e7d605997f00d39d.yaml | 6 + ...ix-self-owned-node-policy-fc2dae357879dc33.yaml | 7 + ...g-ethernetinterfaces-attr-7e52f7259fe66762.yaml | 9 + ...-ironic-default-boot-mode-dde6f65ea084c9e6.yaml | 12 + .../notes/no-recalculate-653e524fd6160e72.yaml | 5 + ...ode-iso-external_http_url-c5e3fa9ae4960dd6.yaml | 5 + ...ken-upon-cleaning-timeout-c9add514fad1b02c.yaml | 7 + reno.yaml | 4 - tox.ini | 19 +- zuul.d/project.yaml | 11 +- 65 files changed, 1658 insertions(+), 369 deletions(-)

1 0

ironic-inspector 11.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are jazzed to announce the release of: ironic-inspector 11.1.1: Hardware introspection for OpenStack Bare Metal This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.1.1 ^^^^^^ Bug Fixes * Fixes an issue where inspection would fail if an IPv6 address wrapped in brackets is used for the redfish BMC address. See bug: 2036455 (https://bugs.launchpad.net/ironic/+bug/2036455) Changes in ironic-inspector 11.1.0..11.1.1 ------------------------------------------ 9ea9f61 Handle bracketed IPv6 redfish_address 76e277b [zed-only] Fix functional tests e1932cd Make reno ignore bugfix eol tags 6c3cbd1 [stable-only] Fixes for tox 4.0 compatability c2e4d64 Update TOX_CONSTRAINTS_FILE for stable/zed a2caaab Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 4 ++++ ironic_inspector/test/functional.py | 5 +++++ ironic_inspector/test/unit/test_common_ironic.py | 8 ++++++++ releasenotes/config.yaml | 2 ++ releasenotes/notes/bug-2036455-bd3f6381b78c20db.yaml | 7 +++++++ tox.ini | 18 ++++++++++++------ 7 files changed, 39 insertions(+), 6 deletions(-)

1 0

octavia 10.1.1 (yoga)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are chuffed to announce the release of: octavia 10.1.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 10.1.1 ^^^^^^ Upgrade Notes ************* * A patch that fixes an issue making the VIP port unreachable because of missing IP rules requires an update of the Amphora image. Bug Fixes ********* * Fixed the ability to use the 'text/plain' mime type with the healthcheck endpoint. * Fixed an issue when deleting the last listener from a load balancer may trigger a failover. * Fixed an issue when using certificates with a blank subject or missing CN. * Fix amphora haproxy_count to return the number of haproxy processes that are running. * Fixed a bug in amphorav1, the subnet of a member that was being deleted was not immediately unplugged from the amphora, but only during the next update of the members. * Fixed an issue when adding or deleting a member, Octavia might have reconfigured the management port of the amphora by adding or removing additional subnets. Octavia no longer updates the management port during those tasks. * Fixed a bug with HTTP/HTTPS health-monitors on pools with ALPN protocols in the amphora-driver. The healthchecks sent by haproxy were flagged as bad requests by the backend servers. Updated haproxy configuration to use ALPN for the heathchecks too. * Fixed a bug that could have made the VIP port unreachable because of the removal of some IP rules in the Amphora. It could have been triggered only when sending a request from a subnet that is not the VIP subnet but that is plugged as a member subnet. * Fixed an issue with load balancers stuck in a "PENDING_*" state during database outages. Now when a task fails in Octavia, it retries to update the "provisioning_status" of the load balancer until the database is back (or it gives up after a really long timeout - around 2h45) * Fixed a bug in octavia-status which reported an incorrect status for the *amphorav2* driver when using the default *amphora* alias. * Modified default Keepalived LVS persistence granularity configuration value so it would be ipv6 compatible. * Fixed a race condition in the members batch update API call, the data passed to the Octavia worker service may have been incorrect when quickly sending successive API calls. Then the load balancer was stuck in PENDING_UPDATE provisioning_status. * Fixed a too long timeout when attempting to start the VRRP service in an unreachable amphora during a failover. A specific shorter timeout should be used during the failovers. * Fixed TLS-HELLO health-monitors in the amphora-driver. * Usage of "castellan_cert_manager" as cert_manager has been significantly improved. Now you can define configuration options for castellan in octavia.conf and they will be passed properly to castellan beckend. This allows to use allowed castellan backends as for certificate storage. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers. Many updates of an unreachable amphora may have been attempted during a failover, now if an amphora is not reachable at the first update, the other updates are skipped. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers when both amphorae are unreachable. * Fixed SQLAlchemy warnings about the relationship between the Tags object and the other Octavia resources. Other Notes *********** * Noop certificate manager was added. Now any Octavia certificate operations using noop drivers will be faster (as they won't be validated). Changes in octavia 10.1.0..10.1.1 --------------------------------- 1ceac5af Don't update the management port when calculating delta [v1] 53a38d62 Don't update the management port when calculating delta 0398dd6e Fix issue with certificates with no subject or CN fd5185f8 Stable-only: Cap hacking to < 6.1.0 714ef1c8 Fix TLS-HELLO healthmonitors in the amphora-driver 937bb928 Fix health-monitors with ALPN members 5b388dbf Add Noop Certificate Manager 5715f837 Fix text/plain mime type with healthcheck endpoint c8bd99e3 Fix amphorav1 member deletion bug e7359036 Fix create_server_group in compute noop 488adb29 Fix amphorae in ERROR during the failover 68cb6e38 Reduce duration of failovers with amphora in ERROR 9e5a6340 Fix timeout duration in start_vrrp_service during failovers 5a411a68 Retry to set loadbalancer prov status on failures 231398ca Fix race condition in members batch update API call 676499f2 Fix incorrect removal of IP rules in the amphora 5bf40c89 Drop lower-constraints.txt and its testing 61bb22bb Fix persistence_granularity default value 1f224a9f Fix octavia-status with amphorav2 fc9a8f10 Fix upgrade check not working 16578229 Fix typo in lvs-masquerade.sh d410c510 Fix job book deletion issue in taskflow 09fb2529 fix haproxy_count to display the number of running processes 4e15e812 Fix failover when the last listener is deleted 64b8846e Fix SQLAlchemy warning about conflict relationship with Tags 11119484 Rename Context to RequestContext 8fbe035c Pass config to castellan Diffstat (except docs and test files) ------------------------------------- .../static/usr/local/bin/lvs-masquerade.sh | 8 +- lower-constraints.txt | 178 --------------- .../backends/agent/api_server/amphora_info.py | 3 +- .../amphorae/backends/agent/api_server/osutils.py | 1 + .../backends/health_daemon/health_daemon.py | 12 +- octavia/amphorae/backends/utils/interface.py | 16 +- octavia/amphorae/backends/utils/interface_file.py | 9 +- octavia/amphorae/drivers/driver_base.py | 16 ++ .../amphorae/drivers/haproxy/rest_api_driver.py | 23 +- .../drivers/keepalived/vrrp_rest_driver.py | 3 +- octavia/amphorae/drivers/noop_driver/driver.py | 3 + octavia/api/common/hooks.py | 3 +- octavia/api/root_controller.py | 2 +- octavia/api/v2/controllers/member.py | 6 +- octavia/certificates/manager/castellan_mgr.py | 5 +- octavia/certificates/manager/noop.py | 106 +++++++++ octavia/cmd/status.py | 5 +- octavia/common/base_taskflow.py | 13 +- octavia/common/config.py | 11 + octavia/common/constants.py | 7 + octavia/common/context.py | 2 +- octavia/common/exceptions.py | 6 + .../haproxy/combined_listeners/templates/macros.j2 | 12 +- octavia/common/jinja/lvs/templates/macros.j2 | 4 +- octavia/common/tls_utils/cert_parser.py | 26 ++- octavia/compute/drivers/noop_driver/driver.py | 6 + octavia/controller/worker/task_utils.py | 34 ++- .../controller/worker/v1/flows/amphora_flows.py | 51 ++++- .../worker/v1/flows/load_balancer_flows.py | 20 +- .../worker/v1/tasks/amphora_driver_tasks.py | 129 +++++++++-- .../controller/worker/v1/tasks/lifecycle_tasks.py | 109 ++++++--- .../controller/worker/v1/tasks/network_tasks.py | 27 ++- .../controller/worker/v2/flows/amphora_flows.py | 51 ++++- .../worker/v2/flows/load_balancer_flows.py | 20 +- .../worker/v2/tasks/amphora_driver_tasks.py | 125 ++++++++-- .../controller/worker/v2/tasks/lifecycle_tasks.py | 136 +++++++---- .../controller/worker/v2/tasks/network_tasks.py | 23 +- octavia/db/models.py | 21 +- .../api/v2/test_availability_zone_profiles.py | 15 +- .../functional/api/v2/test_availability_zones.py | 15 +- .../functional/api/v2/test_flavor_profiles.py | 15 +- .../backends/agent/api_server/test_amphora_info.py | 7 +- .../backends/agent/api_server/test_osutils.py | 2 +- .../backends/health_daemon/test_health_daemon.py | 8 + .../unit/amphorae/backends/utils/test_interface.py | 81 +++++++ .../amphorae/backends/utils/test_interface_file.py | 2 + .../drivers/haproxy/test_rest_api_driver.py | 6 +- .../drivers/keepalived/test_vrrp_rest_driver.py | 17 ++ .../haproxy/combined_listeners/test_jinja_cfg.py | 33 ++- .../sample_configs/sample_configs_combined.py | 8 +- .../unit/controller/worker/test_task_utils.py | 58 ++++- .../worker/v1/flows/test_amphora_flows.py | 33 ++- .../worker/v1/flows/test_load_balancer_flows.py | 26 ++- .../worker/v1/tasks/test_amphora_driver_tasks.py | 240 +++++++++++++++++++- .../worker/v1/tasks/test_network_tasks.py | 30 +-- .../worker/v2/flows/test_amphora_flows.py | 33 ++- .../worker/v2/flows/test_load_balancer_flows.py | 15 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 251 +++++++++++++++++++-- .../worker/v2/tasks/test_network_tasks.py | 11 - ...heck-text-plain-mime-type-134485abb8bcea0c.yaml | 5 + ...r-delete-causing-failover-251efdb79af24c0a.yaml | 5 + ...andle-blank-cert-subjects-b660d403ce56b0b8.yaml | 4 + .../add-noop-cert-manager-7018d3933a0ce9c6.yaml | 4 + ...fix-amphora-haproxy-count-b1b1df43a7150926.yaml | 5 + ...x-amphorav1-subnet-member-9921d1ba387ff975.yaml | 6 + ...ad-management-port-update-3fa157f74ee8c7b2.yaml | 7 + ...thmonitor-with-alpn-pools-82249b2b9a025068.yaml | 7 + .../fix-ip-rules-in-amphora-b74b7b616752c13b.yaml | 11 + ...-in-PENDING-on-DB-failure-1ffea71a86cd4ea9.yaml | 7 + ...-octavia-status-amphorav2-038fe77a2189b99f.yaml | 5 + ...granularity-default-value-540093bbf6518ed8.yaml | 5 + ...ition-member-batch-update-1aed0e06004c5dad.yaml | 7 + ...eout-dict-when-start-vrrp-278d4837702bd247.yaml | 6 + ...-tls-hello-healthmonitors-a4b98a80f6de8394.yaml | 4 + .../octavia_castellan_config-995e65f129e3e983.yaml | 7 + .../reduce-duration-failover-636032433984d911.yaml | 7 + ...-standby-amphora-in-error-3c1d75bc7d9b169f.yaml | 5 + ...ags-relationship-warnings-a3c0175135f6cd84.yaml | 5 + requirements.txt | 4 + setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 10 - zuul.d/projects.yaml | 1 - 102 files changed, 2305 insertions(+), 669 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e16be6f8..1e525595 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index 555d738c..93f0cd23 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking<6.1.0 # Apache-2.0

1 0

zun 10.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are delighted to announce the release of: zun 10.0.1: OpenStack Containers service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through: https://bugs.launchpad.net/zun/+bugs For more details, please see below. Changes in zun 10.0.0..10.0.1 ----------------------------- 13379fd9 Specify a specific version of docker d5f102d7 Fix circular import 5c2f205e Fix tox4 error 54c66fc3 Disable git owner check for zun c3ddf2ec Handle io_service_bytes_recursive is None 1656d8ff Install zun from stable branch Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - devstack/settings | 2 ++ tox.ini | 20 ++++++++++++++------ zun/cni/api.py | 3 ++- zun/common/context.py | 4 ++-- zun/container/docker/driver.py | 2 +- 8 files changed, 25 insertions(+), 13 deletions(-)

1 0

networking-generic-switch 7.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We enthusiastically announce the release of: networking-generic-switch 7.0.1: Generic Switch ML2 Neutron Driver This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/networking-generic-switch Download the package from: https://pypi.org/project/networking-generic-switch Please report issues through: https://storyboard.openstack.org/#!/project/openstack/networking- generic-switch For more details, please see below. 7.0.1 ^^^^^ Bug Fixes * Fixes a regression when binding 802.3ad port groups on netmiko devices other than cumulus. Changes in networking-generic-switch 7.0.0..7.0.1 ------------------------------------------------- 5ea181e Fix regression plugging 802.3ad port group 0f1c5dd Fixes for tox 4.0 cef630a Update TOX_CONSTRAINTS_FILE for stable/zed 248fafa Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../devices/netmiko_devices/__init__.py | 8 ++++++++ ...regression-binding-port-groups-af6978a199a381b1.yaml | 5 +++++ tox.ini | 17 ++++++++++++----- 5 files changed, 40 insertions(+), 5 deletions(-)

1 0

sushy 4.3.4 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: sushy 4.3.4: Sushy is a small Python library to communicate with Redfish based systems This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.3.4 ^^^^^ Bug Fixes * Fixes bug where sushy would not pass a read/connect timeout through to requests when making requests to a redfish service. This means that an ill-timed failure could cause python processes calling sushy to freeze indefinately. * Add retries on iDRAC error with code SYS518 and message "iDRAC is currently unable to display any information because data sources are unavailable." for all request types in addition to existing GET methods. This helps to fix a known intermittent issue when deleting set of volumes one after another and iDRAC is reloading after deleting each volume. * Fixes 'Unsupported parameter name @Redfish.OperationApplyTime' error on iDRAC firmware version 6.00.02.00 or newer when deleting volumes. * Correctly handles error code "Base.1.5.PropertyMissing" when dealing with hardware that requires "TransferProtocolType" for virtual media operations. * Correctly handles errors on a request that is re-tried after refreshing an authentication token. * An issue was encountered on some HPE iLO supported machines where the Baseboard Management Controller would respond with a HTTP 400 error and an error message indicating the requested operation was invalid for the then system state. For example, attempting to change the power state via the BMC shortly after previously changing the power state. We now attempt to retry within the permitted number of retries when this error is encountered. * Workaround for https://github.com/psf/requests/issues/3829 If the env "REQUESTS_CA_BUNDLE" is set the "requests.Session()" ignores the verify parameter. Therefore the verify parameter is moved directly into the function call of requests. Changes in sushy 4.3.3..4.3.4 ----------------------------- bb00d94 Handle exceptions after re-authentication 47e4e55 Remove version field from iLO error 8ff0d10 Requests must always have a read/connect timeout b7d2456 Retry on ilo state error 4ee0a97 workaround: requests verify handling if env is set e4108b3 Exclude all files starting with . from flake8 tests 3e16da9 Fix volume deletion on newer iDRACs e39c25f Retry on iDRAC SYS518 errors for all requests 5e2807a Handle proper code_status in unit test 69b014c Handle a different error code for missing TransferProtocolType Diffstat (except docs and test files) ------------------------------------- ...-read-and-connect-timeout-9f7dc3ed63c192c8.yaml | 5 + ...olume_operation-on_sys518-009f2b16e5c38a27.yaml | 8 ++ ...operational_time_property-f53f650d8612a847.yaml | 4 + .../notes/property-missing-7602c421ec177e9a.yaml | 6 + releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 + ...retry-ilo-not-ready-error-0b4dce882282eaac.yaml | 10 ++ ...-requests-verify-handling-6879c273b651246f.yaml | 9 ++ sushy/connector.py | 80 ++++++++--- sushy/exceptions.py | 18 ++- sushy/resources/manager/virtual_media.py | 17 ++- sushy/resources/system/storage/volume.py | 18 ++- .../unit/resources/manager/test_virtual_media.py | 27 ++-- .../unit/resources/system/storage/test_volume.py | 79 +++++++++++ tox.ini | 2 +- 15 files changed, 378 insertions(+), 58 deletions(-)

1 0

ironic-python-agent 9.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We exuberantly announce the release of: ironic-python-agent 9.1.1: Ironic Python Agent Ramdisk This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.1.1 ^^^^^ Bug Fixes * Fixes a failure case where a deployed instance may be unable to access the configuration drive post-deployment. This can occur when block devices only support 4KB IO interactions. When 4KB block IO sizes are in use, the ISO9660 filesystem driver in Linux cannot be used as it is modeled around a 2KB block. We now attempt to verify, and rebuild the configuration drive on a FAT filesystem when we cannot mount the supplied configuration drive. Operators can force the agent to write configuration drives using the FAT filesystem using the "[DEFAULT]config_drive_rebuild" option. * Fixes UEFI NVRAM record handling with efibootmgr so we can accept and handle UTF-16 encoded data which is to be expected in UEFI NVRAM as the records are UTF-16 encoded. * Fixes handling of UEFI NVRAM records to allow for unexpected characters in the response, so it is non-fatal to Ironic. * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. * Fixes, or at least lessens the case where a running Ironic agent can stack up numerous lookup requests against an Ironic deployment when a node is locked. In particular, this is beause the lookup also drives generation of the agent token, which requires the conductor to allocate a worker, and generate the token, and return the result to the API client. Ironic's retry logic will now wait up to "60" seconds, and if an HTTP Conflict (409) message is received, the agent will automatically pause lookup operations for thirty seconds as opposed continue to attempt lookups which could create more work for the Ironic deployment needlessly. Changes in ironic-python-agent 9.1.0..9.1.1 ------------------------------------------- 256dfe4 Conditional creation of RAIDed ESP for UEFI Software RAID 5a78bf2 preserve/handle config drives on 4k block devices 06214d7 Handle the node being locked 09c3c41 Fix UTF-16 result handling for efibootmgr fa7e33b Make reno ignore bugfix eol tags 72dd569 Fixes for tox 4.0 ae2fe94 Update TOX_CONSTRAINTS_FILE for stable/zed 75e15dc Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/config.py | 5 + ironic_python_agent/efi_utils.py | 15 +- ironic_python_agent/ironic_api_client.py | 27 ++- ironic_python_agent/partition_utils.py | 98 ++++++++- ironic_python_agent/raid_utils.py | 112 ++++++---- releasenotes/config.yaml | 2 + ...-block-size-config-drives-4470828dd06d2600.yaml | 12 ++ ...ootmgr-character-encoding-19e531ba694824c1.yaml | 9 + .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 13 ++ tox.ini | 23 ++- 18 files changed, 637 insertions(+), 127 deletions(-)

1 0

python-openstackclient 6.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We exuberantly announce the release of: python-openstackclient 6.0.1: OpenStack Command-line Client This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 6.0.1 ^^^^^ New Features ************ * The "server rebuild" commands now accept two optional "--reimage- boot-volume" and "--no-reimage-boot-volume``option. Passing these parameter will allow/disallow a user to rebuild a volume backed server. This is available from Compute microversion ``2.93" and onwards. Bug Fixes ********* * Fixed a bug in "access rule" subcommands where the client logic incorrectly assumed that access rules have a "name" property which resulted in unpredictable behaviors. e.g. "access rule delete {non- existent-id}" now results in a not-found error instead of sometimes deleting an unrelated rule. Changes in python-openstackclient 6.0.0..6.0.1 ---------------------------------------------- 0c07b165 [stable-only] CI: Drop all tips jobs 48148e7a Fix "access rule" commands to only use ID fc80188e Fix pep issue in the network service provider 7d702baf compute: Add support for microversion 2.93 0118d57c compute: Require image when rebuilding a volume-backed server d28c2584 Update TOX_CONSTRAINTS_FILE for stable/zed 2b19e97e Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 84 --------------- openstackclient/compute/v2/server.py | 71 ++++++++++++- openstackclient/identity/common.py | 12 +++ openstackclient/identity/v3/access_rule.py | 14 +-- .../network/v2/network_service_provider.py | 26 +++-- ...-reimage-param-to-rebuild-606dd331677b5954.yaml | 8 ++ .../notes/fix-story-2010775-953dbdf03b2b6746.yaml | 8 ++ tox.ini | 8 +- 11 files changed, 252 insertions(+), 118 deletions(-)

1 0

os-vif 3.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are stoked to announce the release of: os-vif 3.0.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. Changes in os-vif 3.0.0..3.0.1 ------------------------------ 51b7f48 Move mtu update request into ovsdb transaction a602eca Update TOX_CONSTRAINTS_FILE for stable/zed 37fd20f Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 4 +- vif_plug_ovs/ovsdb/ovsdb_lib.py | 23 ++++++--- 5 files changed, 64 insertions(+), 26 deletions(-)

1 0

manila 15.4.0 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are thrilled to announce the release of: manila 15.4.0: Shared Storage for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. Changes in manila 15.3.0..15.4.0 -------------------------------- c0fc23a39 Change status and error handling for /shares API 5034acd82 Add service_network_host option for port host 13dabf77b Don't fail remove-export in NFS-Ganesha 2dcbb2c76 Fix policy check in metadata APIs 45fe43928 [rbac] Pull up policy checks on share/snapshot APIs 569a30df0 Shorten snapshots names in CephFS drivers Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 22 ++++- manila/api/v2/shares.py | 5 + manila/share/api.py | 10 +- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + manila/share/drivers/service_instance.py | 7 +- manila/share/share_types.py | 4 +- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 ++ 21 files changed, 278 insertions(+), 114 deletions(-)

1 0

oslo.messaging 14.0.3 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are psyched to announce the release of: oslo.messaging 14.0.3: Oslo Messaging API This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 14.0.2..14.0.3 ---------------------------------------- ee0bf90b Add is_admin to safe fields list for notifications 4d15b7c4 Disable greenthreads for RabbitDriver "listen" connections Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 2 ++ oslo_messaging/_utils.py | 3 +++ oslo_messaging/notify/notifier.py | 4 ++++ 3 files changed, 9 insertions(+)

1 0

keystonemiddleware 10.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are jazzed to announce the release of: keystonemiddleware 10.1.1: Middleware for OpenStack Identity This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. Changes in keystonemiddleware 10.1.0..10.1.1 -------------------------------------------- b61d312 Add timeout for requests f602fa7 Remove cache invalidation when using expired token 46778cd Update TOX_CONSTRAINTS_FILE for stable/zed 0d3dd74 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystonemiddleware/auth_token/__init__.py | 6 ----- keystonemiddleware/ec2_token.py | 9 +++++--- keystonemiddleware/s3_token.py | 12 +++++++++- .../unit/auth_token/test_auth_token_middleware.py | 19 ---------------- tox.ini | 2 +- 7 files changed, 33 insertions(+), 42 deletions(-)

1 0

nova 26.2.2 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are overjoyed to announce the release of: nova 26.2.2: Cloud computing fabric controller This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 26.2.1..26.2.2 ------------------------------ e41962f5fa Do not untrack resources of a server being unshelved 7422642dd6 Reproduce bug #2025480 in a functional test Diffstat (except docs and test files) ------------------------------------- nova/compute/manager.py | 6 +- nova/compute/resource_tracker.py | 7 +- nova/compute/stats.py | 3 +- nova/compute/vm_states.py | 11 ++- .../functional/regressions/test_bug_2025480.py | 86 ++++++++++++++++++++++ 6 files changed, 121 insertions(+), 8 deletions(-)

1 0

cloudkitty 17.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are stoked to announce the release of: cloudkitty 17.0.1: Rating as a Service component for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. 17.0.1 ^^^^^^ Bug Fixes * Fix failure to process rating using the PyScripts rating module. * Fix retrieval of reprocessing tasks which was returning "Internal Server Error". Changes in cloudkitty 17.0.0..17.0.1 ------------------------------------ 56ec4f1 Fix random unit test failures d848043 Fix retrieval of reprocessing tasks 44a7db9 Fix PyScripts processing 12a84c5 [docs] Install cloudkitty requirements using constraints 64b92f3 Update TOX_CONSTRAINTS_FILE for stable/zed e146972 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + cloudkitty/api/v2/task/reprocess.py | 8 +- cloudkitty/dataframe.py | 4 +- cloudkitty/rating/pyscripts/__init__.py | 47 +++- .../notes/fix_py_scripts-fd9ab52c92263844.yaml | 4 + .../notes/reprocess-get-fix-f2bd1f2f9e2d640e.yaml | 5 + tox.ini | 5 +- 11 files changed, 356 insertions(+), 138 deletions(-)

1 0

ironic-python-agent-builder 5.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are pleased to announce the release of: ironic-python-agent-builder 5.0.1: Tools and scripts to build Ironic Python Agent This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent-builder For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixes excess files being housed in /var/tmp inside of a ramdisk image which may, in some cases, result in a much larger ramdisk than expected. Files and folders in /var/tmp within a ramdisk are now removed prior to the ramdisk being packaged as part of a DIB based image build. Changes in ironic-python-agent-builder 5.0.0..5.0.1 --------------------------------------------------- f560170 Drop TripleO job e2c1c82 Extend the DIB_CHECKSUM variable usage dbd6634 Add checksum generation support b097986 Add libaio engine for fio on Centos/Rhel9 cb5efad Remove /var/tmp/* from images daab68f Update TOX_CONSTRAINTS_FILE for stable/zed f6d15d0 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + dib/burn-in/package-installs.yaml | 5 +++++ dib/extra-hardware/package-installs.yaml | 5 +++++ .../post-install.d/99-remove-extra-packages | 4 ++++ dib/ironic-ramdisk-base/cleanup.d/99-ramdisk-create | 7 +++++++ dib/ironic-ramdisk-base/environment.d/10-checksum.bash | 1 + .../notes/clean-var-tmp-with-dib-builds-cd31a2cf70a7f935.yaml | 7 +++++++ tox.ini | 2 +- zuul.d/project.yaml | 2 -- 9 files changed, 31 insertions(+), 3 deletions(-)

1 0

magnum 17.0.2 (bobcat)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are gleeful to announce the release of: magnum 17.0.2: Container Management project for OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 17.0.1..17.0.2 -------------------------------- 272fd686 Move the chmod function before the write and flush functions to prevent sensitive information leakage. Diffstat (except docs and test files) ------------------------------------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-)

1 0

neutron-fwaas 17.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: neutron-fwaas 17.0.1: OpenStack Networking FWaaS This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 17.0.0..17.0.1 --------------------------------------- 9cd7d7048 Add CONTEXT_WRITER to _get_default_fwg_id 2a4f85e9c Add get_firewall_groups_count method 1fc233a50 Use upper-constraints in docs job 7545e6a26 Fix tox.ini with tox4 f4ce1441a Update TOX_CONSTRAINTS_FILE for stable/zed 5ef0ce7c6 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 1 + neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 5 +++++ tox.ini | 23 +++++++++++++--------- 4 files changed, 21 insertions(+), 9 deletions(-)

1 0

magnum 16.0.2 (antelope)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are overjoyed to announce the release of: magnum 16.0.2: Container Management project for OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 16.0.1..16.0.2 -------------------------------- 883b40b5 Move the chmod function before the write and flush functions to prevent sensitive information leakage. 36cf1c85 Missing load balancer health monitors fix Diffstat (except docs and test files) ------------------------------------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- magnum/drivers/common/templates/lb_api.yaml | 2 +- magnum/drivers/common/templates/lb_etcd.yaml | 2 +- 3 files changed, 5 insertions(+), 6 deletions(-)

1 0

keystoneauth 5.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We high-spiritedly announce the release of: keystoneauth 5.0.1 This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.0.0..5.0.1 ------------------------------------ 61c3dc7 Make v3oidcpassword send client_id 1b262cd Update TOX_CONSTRAINTS_FILE for stable/zed 7053ec9 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystoneauth1/identity/v3/oidc.py | 3 ++- tox.ini | 6 +++--- 3 files changed, 6 insertions(+), 4 deletions(-)

1 0

ironic-inspector 12.0.0 (caracal)
by no-reply＠openstack.org 02 Feb '24

02 Feb '24

We enthusiastically announce the release of: ironic-inspector 12.0.0: Hardware introspection for OpenStack Bare Metal This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 12.0.0 ^^^^^^ Upgrade Notes ************* * The legacy Role Based Access Control policy used by ironic- inspector has been disabled by default. The end result of this is that the legacy "baremetal_admin" and "baremetal_observer" roles are no longer enabled by default. System scoped access can be utilized to connect to the "ironic-inspector" service, or alternatively a user with an "admin" or "service" role. The Ironic project does not anticipate any issues with this change, as the the "ironic-inspector" service is a service *for* the system itself. That being said, if the operator deployed configuration is reliant upon the deprecated roles, configuration changes will be required. This change is a result of the new policy which was introduced as part of Consistent and Secure RBAC community goal and the underlying "[oslo_policy] enforce_scope" and "[oslo_policy] enforce_new_defaults" settings being changed to "True". Operators wishing to revert to the old policy configuration may do so by setting the following values in "ironic-inspector.conf".: [oslo_policy] enforce_new_defaults=False enforce_scope=False Operators who revert the configuration are encouraged to make the necessary changes to their configuration, as the legacy RBAC policy will be removed at some point in the future. Please review 2024.1-Release Timeline. Failure to do so will may force operators to craft custom policy override configuration. (https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html) (https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html#id3) Bug Fixes ********* * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficient without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.8.0..12.0.0 ------------------------------------------ fff8008 Change policy to enforce only new policy c08ab06 [codespell] Adding CI target for Tox Codespell fd0d817 [codespell] Adding Tox Target for Codespell 98a226b [codespell] Fixing Spelling Mistakes 0fb5589 Update python classifier in setup.cfg 5523b11 Fix RBAC access for service/admin user access db76af9 Handle LLDP parse Unicode error bf59b80 Fix versions in release notes dc5da67 Suppress logs from stevedore 969cccb [coordination] backend_url should be secret Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 4 +- ironic_inspector/common/lldp_tlvs.py | 2 +- ironic_inspector/common/swift.py | 2 +- ironic_inspector/conf/coordination.py | 1 + ironic_inspector/conf/opts.py | 1 + ironic_inspector/db/api.py | 4 +- .../18440d0834af_introducing_the_aborting_state.py | 2 +- ironic_inspector/main.py | 2 +- ironic_inspector/node_cache.py | 10 +- ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/plugins/local_link_connection.py | 2 +- ironic_inspector/policy.py | 40 ++- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- ironic_inspector/test/unit/test_introspect.py | 2 +- .../notes/accelerators-2aa4f0cedf359810.yaml | 2 +- .../notes/extra-check-9cf0a7d89e534ccd.yaml | 2 +- .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + .../keystoneauth-plugins-aab6cbe1d0e884bf.yaml | 12 +- ...gacy-rbac-policy-disabled-6fc45ad1237f4d57.yaml | 35 ++ .../notes/policy-engine-c44828e3131e6c62.yaml | 2 +- ...-deny-unknown-host-option-b84b2aa1f7f49a17.yaml | 2 +- ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + ...qlalchemy-minimum-version-cd34a2e10d7946fd.yaml | 2 +- releasenotes/source/2023.1.rst | 6 +- releasenotes/source/2023.2.rst | 6 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 12 +- releasenotes/source/zed.rst | 6 +- setup.cfg | 7 + tox.ini | 8 + zuul.d/ironic-inspector-jobs.yaml | 9 + zuul.d/project.yaml | 2 + 31 files changed, 519 insertions(+), 59 deletions(-)

1 0

manila 16.2.0 (antelope)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We jubilantly announce the release of: manila 16.2.0: Shared Storage for OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue to add the retry logic to delete and release the snapmirror relationship. Delete the vserver pairing when there is no snapmirror relationship exist on source and destination cluster. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. Changes in manila 16.1.0..16.2.0 -------------------------------- 7918f1d4b Change status and error handling for /shares API eefc68c48 NetApp API failed. Reason - 18177:Relationship is in use by SnapMirror in local cluster 07c584cf7 Add service_network_host option for port host b76a035d7 Don't fail remove-export in NFS-Ganesha d5c2eb112 Fix policy check in metadata APIs 8edaa3254 [rbac] Pull up policy checks on share/snapshot APIs 3be5df4e1 Shorten snapshots names in CephFS drivers Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 22 ++++- manila/api/v2/shares.py | 5 + manila/share/api.py | 10 +- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 28 ++++-- manila/share/drivers/service_instance.py | 7 +- manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_lib_multi_svm.py | 17 +++- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...ed-relationship-is-in-use-ecc9ede4d7f0f5b9.yaml | 8 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 ++ 24 files changed, 320 insertions(+), 125 deletions(-)

1 0

ironic 20.1.3 (yoga)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are psyched to announce the release of: ironic 20.1.3: OpenStack Bare Metal Provisioning This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 20.1.3 ^^^^^^ Bug Fixes * Modify iRMC driver to use ironic.conf [deploy] default_boot_mode to determine default boot_mode. Changes in ironic 20.1.2..20.1.3 -------------------------------- dcf5af560 redfish_address - wrap_ipv6 address cecf9e229 Align iRMC driver with Ironic's default boot_mode Diffstat (except docs and test files) ------------------------------------- ironic/common/utils.py | 8 ++++++-- ironic/drivers/modules/irmc/management.py | 4 ++-- ironic/drivers/modules/redfish/utils.py | 3 ++- .../unit/drivers/modules/irmc/test_management.py | 20 ++++++++++---------- .../unit/drivers/modules/redfish/test_utils.py | 8 ++++++++ ...h-ironic-default-boot-mode-dde6f65ea084c9e6.yaml | 12 ++++++++++++ 8 files changed, 62 insertions(+), 20 deletions(-)

1 0